Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5f24dc-042f-39b2-9e01-8f21a6d4413b.roa
File: 8a5f24dc-042f-39b2-9e01-8f21a6d4413b.roa (raw, json)
Hash identifier: Nz3dqZERkOItW5AhjsX7dEt8s8Evb3MGiWNjbl/MaJQ=
Subject key identifier: D6:95:86:8F:62:3F:F0:00:00:6C:5C:D0:EB:3E:28:C4:ED:E2:1C:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E5AE65EF957978CE8D342C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5f24dc-042f-39b2-9e01-8f21a6d4413b.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:5a:e6:5e:f9:57:97:8c:e8:d3:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=cdd441c8-5bb6-4b3a-9d34-2a9a81b1b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:0d:f7:73:6a:35:55:4e:1f:ea:b0:74:b3:
9a:85:3c:c9:97:71:f3:70:ff:d5:b1:be:c2:8a:1f:
bc:49:31:2a:53:9b:14:82:47:15:c5:22:7e:48:c2:
01:57:7a:99:ba:81:29:0a:ff:3e:b2:7d:10:cb:1d:
00:e9:dc:ac:21:19:10:3e:6a:58:7a:3d:80:9d:24:
f6:10:b3:a5:93:d1:d3:ba:a4:74:c8:46:39:81:11:
6d:02:8f:7e:b6:3e:50:dc:e8:f1:aa:60:14:45:c0:
2f:62:2f:ad:37:5f:2f:81:e2:28:b8:01:f5:f4:2e:
f9:15:bb:e0:11:d0:1b:86:31:81:69:00:5a:41:76:
39:ff:65:0d:c4:9e:25:01:27:c8:d7:82:41:fd:ae:
7c:5c:51:20:43:5b:36:ce:90:fd:c3:2a:93:3c:52:
dc:dc:5a:be:25:0e:24:ef:de:3a:4f:60:7d:22:35:
a2:cd:76:87:55:35:f8:88:fd:b5:2a:46:94:57:9c:
19:21:fa:53:f1:c5:c4:38:16:d3:94:1b:8d:32:41:
b8:fb:8b:6a:a6:48:be:68:f3:de:31:be:e2:52:24:
96:ef:ba:1c:1b:d2:f8:fd:a0:c1:57:fc:65:d9:5b:
2c:56:57:5f:2a:b5:a9:76:ec:cf:1d:73:a3:d5:7f:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:86:8F:62:3F:F0:00:00:6C:5C:D0:EB:3E:28:C4:ED:E2:1C:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5f24dc-042f-39b2-9e01-8f21a6d4413b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f4:7e:8e:65:b8:ee:1d:df:03:86:22:0b:43:39:0c:d9:9a:
aa:12:7f:21:15:ef:85:4c:6b:c3:b8:e5:5b:72:d7:cc:23:b7:
48:02:2a:1c:92:56:ae:1e:d5:74:a3:bc:c4:cb:22:31:ce:41:
4a:ef:85:d3:ec:3b:6c:cf:7f:c3:2b:63:fc:21:cd:88:8a:83:
92:df:a9:1f:56:d4:83:0e:ff:1a:02:bd:cc:33:ec:f8:c2:38:
da:27:a5:84:f4:4e:9e:31:ab:9f:9f:5e:95:7c:b9:0e:c2:d4:
3b:80:8b:81:2b:3a:b7:10:fc:a3:3f:3c:a3:fe:a1:6e:28:a2:
3d:ba:c1:66:b5:e1:f3:08:e7:b2:ca:c8:d0:ca:c7:32:b0:73:
40:ec:e6:b8:93:79:7c:f6:6e:64:5f:a6:92:64:db:05:b7:1e:
66:fe:a3:02:0b:68:b1:df:4c:ab:3f:d6:0b:9d:47:74:23:13:
bd:22:3c:cb:b9:d9:8d:88:a1:21:f9:f0:d8:29:6e:d4:72:54:
51:14:6d:d4:67:89:80:30:4f:df:9d:cd:b4:13:38:cd:36:37:
32:d4:f1:92:3d:86:9c:b6:dd:5d:82:97:95:29:96:2e:55:6f:
ea:18:64:e1:67:b7:eb:14:df:7b:91:5b:cf:6b:ae:49:6c:76:
73:54:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:10 2025 by rpki-client